Enabled the API to use the currently logged-in users permissions against...

... api endpoints
" * Must be absolute."
This means if you want to use the API, you need to set this to a value.
I don't think URY's local config currently overrides this, so that will need to be done before this is pulled live (nothing stopping it happen now, ftr)